fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Heap-buffer-overflow in add_compile_string

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5453878510616576 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type:...

fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Crash in renumber_by_map

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6677266440781824 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: libfuzzerubsanfluent-bit Platform Id: linux Crash Type: UNKNOWN READ Cra...

fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Heap-buffer-overflow in flb_parser_create

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5432516900683776 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type:...

fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Heap-buffer-overflow in onigenc_unicode_mbc_case_fold

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4871708834398208 Project: fluent-bit Fuzzing Engine: afl Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: aflasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Heap-buffer-overflow in onig_node_str_cat

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5915968123830272 Project: fluent-bit Fuzzing Engine: afl Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: aflasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow READ 3...

fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Heap-buffer-overflow in onig_vsnprintf_with_pattern

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5564613819498496 Project: fluent-bit Fuzzing Engine: afl Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: aflasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Heap-buffer-overflow in onig_node_str_cat

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6274681082871808 Project: fluent-bit Fuzzing Engine: afl Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: aflasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow READ 4...

PT-2022-37277 · Git +1 · Fluent-Bit

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack buffer overflow error, as indicated by a crash report. The crash involves the flb env var translate and flb parser conf...

fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Stack-buffer-overflow in flb_env_var_translate

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4574057239019520 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type:...

PT-2022-37269 · Git +1 · Fluent-Bit

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-double-free crash. The crash occurs in the flb sds destroy function, which is called by flb parser conf file in the config...

fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Heap-double-free in flb_sds_destroy

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6437799227686912 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-double-free...

fluent-bit:flb-it-fuzz-filter_stdout_fuzzer_OSSFUZZ: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5848956248129536 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-filterstdoutfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer:...

fluent-bit:flb-it-fuzz-filter_stdout_fuzzer_OSSFUZZ: Heap-use-after-free in mk_event_timeout_destroy

Detailed Report: https://oss-fuzz.com/testcase?key=5109268214317056 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-filterstdoutfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address: 0x60d000006ae8 Crash...

CVE-2022-2559

The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection vulnerability exploitable by high privilege users...

CVE-2022-2559

The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection vulnerability exploitable by high privilege users...

CVE-2022-2559

The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection vulnerability exploitable by high privilege users...

CVE-2022-2559 Fluent Support < 1.5.8 - Admin+ SQLi

The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection vulnerability exploitable by high privilege users...

CVE-2022-2559

The CVE-2022-2559 entry concerns the Fluent Support WordPress plugin prior to version 1.5.8. The vulnerability is an SQL Injection caused by improper sanitization, validation, and escaping of parameters before they are used in SQL statements. This can be exploited by high-privilege users, per the...

PT-2022-17386 · WordPress · Fluent Support

Name of the Vulnerable Software and Affected Versions: Fluent Support WordPress plugin versions prior to 1.5.8 Description: The issue is related to improper sanitization, validation, and escaping of various parameters in SQL statements, leading to an SQL Injection vulnerability. This vulnerabilit...

WordPress plugin Fluent Support SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...